Hey there! Haven't played in a while and just came back.
The site currently has no SSL, meaning all traffic (including logins and passwords) are unencrypted. Setting up one through Lets Encrypt is pretty straightforward and free, so if this could be done that'd be great!